Security update for java-1_7_0-openjdk SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0503-1 Final 1 1 2015-03-09T15:33:05Z current 2015-03-09T15:33:05Z 2015-03-09T15:33:05Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for java-1_7_0-openjdk This update fixes 13 security issues. These security issues were fixed: - CVE-2015-0395: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot (bnc#914041). - CVE-2015-0400: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality via unknown vectors related to Libraries (bnc#914041). - CVE-2015-0383: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allowed local users to affect integrity and availability via unknown vectors related to Hotspot (bnc#914041). - CVE-2015-0412: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS (bnc#914041). - CVE-2015-0407: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality via unknown vectors related to Swing (bnc#914041). - CVE-2015-0408: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI (bnc#914041). - CVE-2014-6585: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality via unknown vectors reelated to 2D, a different vulnerability than CVE-2014-6591 (bnc#914041). - CVE-2014-6587: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allowed local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries (bnc#914041). - CVE-2014-6591: Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585 (bnc#914041). - CVE-2014-6593: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allowed remote attackers to affect confidentiality and integrity via vectors related to JSSE (bnc#914041). - CVE-2014-6601: Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot (bnc#914041). - CVE-2015-0410: Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allowed remote attackers to affect availability via unknown vectors related to Security (bnc#914041). - CVE-2014-3566: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, used nondeterministic CBC padding, which made it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the 'POODLE' issue (bnc#901223). These non-security issues were fixed: - Update protocol support (S8046656). - Fewer escapes from escape analysis (S8047130). - Better GC validation (S8049253). - TLAB stability (S8055479). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-122,SUSE-SLE-SERVER-12-2015-122 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ Link for SUSE-SU-2015:0503-1 https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html E-Mail link for SUSE-SU-2015:0503-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/901223 SUSE Bug 901223 https://bugzilla.suse.com/914041 SUSE Bug 914041 https://www.suse.com/security/cve/CVE-2014-3566/ SUSE CVE CVE-2014-3566 page https://www.suse.com/security/cve/CVE-2014-6585/ SUSE CVE CVE-2014-6585 page https://www.suse.com/security/cve/CVE-2014-6587/ SUSE CVE CVE-2014-6587 page https://www.suse.com/security/cve/CVE-2014-6591/ SUSE CVE CVE-2014-6591 page https://www.suse.com/security/cve/CVE-2014-6593/ SUSE CVE CVE-2014-6593 page https://www.suse.com/security/cve/CVE-2014-6601/ SUSE CVE CVE-2014-6601 page https://www.suse.com/security/cve/CVE-2015-0383/ SUSE CVE CVE-2015-0383 page https://www.suse.com/security/cve/CVE-2015-0395/ SUSE CVE CVE-2015-0395 page https://www.suse.com/security/cve/CVE-2015-0400/ SUSE CVE CVE-2015-0400 page https://www.suse.com/security/cve/CVE-2015-0407/ SUSE CVE CVE-2015-0407 page https://www.suse.com/security/cve/CVE-2015-0408/ SUSE CVE CVE-2015-0408 page https://www.suse.com/security/cve/CVE-2015-0410/ SUSE CVE CVE-2015-0410 page https://www.suse.com/security/cve/CVE-2015-0412/ SUSE CVE CVE-2015-0412 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_0-openjdk-1.7.0.75-11.3 java-1_7_0-openjdk-headless-1.7.0.75-11.3 java-1_7_0-openjdk-demo-1.7.0.75-11.3 java-1_7_0-openjdk-devel-1.7.0.75-11.3 java-1_7_0-openjdk-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Desktop 12 java-1_7_0-openjdk-headless-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Desktop 12 java-1_7_0-openjdk-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Server 12 java-1_7_0-openjdk-demo-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Server 12 java-1_7_0-openjdk-devel-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Server 12 java-1_7_0-openjdk-headless-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Server 12 java-1_7_0-openjdk-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_0-openjdk-demo-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_0-openjdk-devel-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_0-openjdk-headless-1.7.0.75-11.3 as a component of SUSE Linux Enterprise Server for SAP Applications 12 The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue. CVE-2014-3566 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical 5.8 AV:N/AC:M/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2014-3566.html CVE-2014-3566 https://bugzilla.suse.com/1011293 SUSE Bug 1011293 https://bugzilla.suse.com/1031023 SUSE Bug 1031023 https://bugzilla.suse.com/901223 SUSE Bug 901223 https://bugzilla.suse.com/901254 SUSE Bug 901254 https://bugzilla.suse.com/901277 SUSE Bug 901277 https://bugzilla.suse.com/901748 SUSE Bug 901748 https://bugzilla.suse.com/901757 SUSE Bug 901757 https://bugzilla.suse.com/901759 SUSE Bug 901759 https://bugzilla.suse.com/901889 SUSE Bug 901889 https://bugzilla.suse.com/901968 SUSE Bug 901968 https://bugzilla.suse.com/902229 SUSE Bug 902229 https://bugzilla.suse.com/902233 SUSE Bug 902233 https://bugzilla.suse.com/902476 SUSE Bug 902476 https://bugzilla.suse.com/903405 SUSE Bug 903405 https://bugzilla.suse.com/903684 SUSE Bug 903684 https://bugzilla.suse.com/904889 SUSE Bug 904889 https://bugzilla.suse.com/905106 SUSE Bug 905106 https://bugzilla.suse.com/914041 SUSE Bug 914041 https://bugzilla.suse.com/994144 SUSE Bug 994144 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591. CVE-2014-6585 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2014-6585.html CVE-2014-6585 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. CVE-2014-6587 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2014-6587.html CVE-2014-6587 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6585. CVE-2014-6591 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2014-6591.html CVE-2014-6591 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. CVE-2014-6593 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2014-6593.html CVE-2014-6593 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2014-6601 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2014-6601.html CVE-2014-6601 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot. CVE-2015-0383 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2015-0383.html CVE-2015-0383 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. CVE-2015-0395 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2015-0395.html CVE-2015-0395 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Libraries. CVE-2015-0400 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2015-0400.html CVE-2015-0400 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing. CVE-2015-0407 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2015-0407.html CVE-2015-0407 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. CVE-2015-0408 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2015-0408.html CVE-2015-0408 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows remote attackers to affect availability via unknown vectors related to Security. CVE-2015-0410 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2015-0410.html CVE-2015-0410 https://bugzilla.suse.com/914041 SUSE Bug 914041 Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS. CVE-2015-0412 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Desktop 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.75-11.3 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.75-11.3 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150503-1/ https://www.suse.com/security/cve/CVE-2015-0412.html CVE-2015-0412 https://bugzilla.suse.com/914041 SUSE Bug 914041